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(57) Abstract: The invention is directed towards a system and method for permitting content having usage rules, such as down- 
loadable digital music, to be shared between one or more devices. The invention permits the downloaded digital music to be shared 
among users with different devices without violating the usage restrictions placed on the music. The system includes using a public 
and private key encryption system to ensure that the usage rights are not violated. 
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KEY EXCHANGE CONTENT COMMUNICATION SYSTEM AND METHOD 

Background of the Invention 

This invention relates generally to a system and method for securely 
communicating content from a first device to a second device and in particular to a 
5 system and method for communicating content having usage rules between two 
devices. 

The growth of the Internet and the increased speed of computers has led to 
various content, such as digital music, being available for listening and downloading 
from one or more different Web sites. The advent of digital downloadable music has 
10 led to the creation of portable digital music players that permit the user to download 
music to the player and then play the music on the portable player. The music is 
typically communicated to the player in a particular protocol, such as MP3, in which 
the content (e.g., the music) may be compressed to reduce the download time and 
reduce the total amount of memory that is occupied by each piece of content. 

15 The content may also be encrypted to ensure that only people with the proper 

password or key are able to listen to the content. In addition, a Web site that permits 
the download of digital music for a price may assign particular usage rules to each 
piece of content. For example, the usage rules for the content may be: 1) play once; 2) 
play many times but no copies, 3) play many times and make a certain number of 

20 copies; 4) play many times and make an unlimited number of copies; or 5) play, copy 
or change/modify/enhance the content. For each different usage rule, the cost of the 
content to the user may change so that a play once piece of content may be free, a play 
many, but no copy piece of content may be a first price and a play many and copy a 
predetermined number of times piece of content may be a second price that is higher 
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than the first price. Thus, the same piece of content may have a plurality of different 
prices depending on the type of usage rules associated with the particular piece of 
content. 

Despite the usage rules associated with each piece of content, it is desirable to 
5 permit a user who purchases a piece of digital content to be able to use the digital 
content just like the user might use a compact disk. In particular, a user may take a 
compact disk and lend it to his friend to listen to and then get the compact disk back 
without paying any more money to the store from which he/she bought the CD. This 
type of lending of media or content is more difficult in a digital content environment 

10 since digital data is more easily transferred so that usage rules have been created to 
prevent the transfer, but the usage rules constrain the ability of the user to user the 
content in certain ways. For example, a user with a song that may be played many 
times, but never copied cannot loan the song to a friend expect by loaning his portable 
player to the friend. Thus, it is desirable to provide a key exchange content 

15 communication system and method which achieves the goal of permitting a usage rule 
limited piece of content to be used similar to content on a traditional media, such as a 
compact disk or a record and it is to this end that the present invention is directed. 

Summary of the Invention 

The invention is directed towards a system for permitting usage rule governed 
20 content, such as downloaded digital music, to be loaned/shared between one or more 
users who may be accessing the content using a device, such as a portable music 
device. In particular, the invention permits the content (e.g., the downloaded digital 
music) to be shared among users with different devices without violating the usage rule 
restrictions associated with the particular piece of content. 
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Thus, in accordance with the invention, a system and method for 
communicating content with associated usage rules between a content originating 
device and a content receiving device is provided. The content originating device may 
determine encryption data for the receiving device and store one or more pieces of 
5 content and its associated usage rights wherein the usage rights limit the use of the 
content. The originating device may also encrypt a stored piece of content and its 
associated usage rights destined for the receiving device using the encryption data of 
the receiving device to generate encrypted data, communicate the encrypted data to the 
receiving device and reduce the usage rights to reflect the usage of the content by the 
10 receiving device. The content receiving device may decrypt the received encrypted 
data to generate content data and usage rights data and store the content and the usage 
rights so that the receiving device plays the content while conforming to the usage 
rights associated with the content. 

In accordance with another aspect of the invention, a device for communicating 
1 5 content with associated usage rules to a device that receives the content is provided. 
The device may determine encryption data for the receiving device and store one or 
more pieces of content and its associated usage rights wherein the usage rights limit the 
use of the content. The device may also encrypt a stored piece of content and its 
associated usage rights destined for the receiving device using the encryption data of 
20 the receiving device to generate encrypted data, communicate the encrypted data to the 
receiving device so that the receiving device decrypts and plays the content without 
violating the usage rights associated with the content, and reduce the usage rights to 
reflect the usage of the content by the receiving device. 

In accordance with yet another aspect of the invention, a device for 
25 communicating audio content with associated usage rules to a device that receives the 
audio content is provided. The device may determine encryption data for the receiving 
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device and store one or more pieces of content and its associated usage rights wherein 
the usage rights limit the use of the content. The device may also encrypt a stored 
piece of content and its associated usage rights destined for the receiving device using 
the encryption data of the receiving device to generate encrypted data, communicate 
5 the encrypted data to the receiving device so that the receiving device decrypts and 
plays the content without violating the usage rights associated with the content, and 
reduce the usage rights to reflect the usage of the content by the receiving device. 

Brief Description of the Drawings 

Figure 1 is a block diagram illustrating one or more content devices wherein the 
10 content in each device has associated usage rules; 

Figure 2 is a diagram illustrating a device in which a piece of content is being 
prepared for loaning to a second device in accordance with the invention; 

Figure 3 is a block diagram illustrating the two devices playing the shared piece 
of content; 

15 Figure 4 is a diagram illustrating the second device returning the piece of 

content to the original user; and 

Figure 5 is a flowchart illustrating a method for sharing usage rule limited 
content in accordance with the invention. 

Detailed Description of a P referred Embodiment 

20 The invention is particularly applicable to sharing/loaning downloaded digital 

music content between portable music devices and it is in this context that the 
invention will be described. It will be appreciated, however, that the system and 
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method in accordance with the invention has greater utility, such as to other types of 
content, such as to other audio content, video content or written content and to other 
types of devices that may share content. Now, the preferred embodiment of the 
invention that may be used to share digital music content will be described in more 
5 detail. 

Figure 1 is a block diagram illustrating one or more content devices 10, 12 
wherein one or more pieces of content 14 in each device each have associated usage 
rules 16. The usage rules may be set of usage rules that limit the use of a particular 
piece of content. The different usage rules may be priced, for example, based on the 

10 types of uses permitted by the particular usage rule. The system in accordance with the 
invention permits these two device to share a piece of content without violating the 
usage rules associated with the content. Although a first device 10 and a second device 
(Device #N) 12 are shown, the invention is not limited to two devices and may be used 
to communicate content between one or more devices. The devices 10, 12 may 

15 communicate with each other using any conventional communications mechanisms 18 
that may be wireless (e.g., infrared, radio frequency or microwave) or landline. In the 
preferred embodiment shown in Figure 1 , the two devices may communicate using a 
wireless 2.4 GHz microwave communications system. 

Each device 10, 12 may include a microprocessor 20 that control the operation 
20 of the device and a memory 22 that stores one or more different pieces of data. The 
pieces of data stored in the memory 22 may include the content data 14, the usage 
rights data 16 and encryption data 24. In the preferred embodiment shown in Figure 1, 
the content data may be digital music data for one or more musical songs and the 
encryption data may include a public key 26 and a private key 28. The public and 
25 private keys 26, 28 may be used, in combination with a symmetric public key 

encryption application (not shown) to encrypt and decrypt the content data. In a 
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preferred embodiment, the encryption and decryption unit may be a software 
application stored in memory that is executed by the microprocessor. In accordance 
with the invention, other encryption methods may also be used to encrypt the content 
and usage rules. Now, the details of the sharing of content between the devices in 
5 accordance with the invention will be described. 

Figure 2 is a diagram illustrating the device 10 in which a piece of content 14 is 
being prepared for loaning/sharing to the second device 12 in accordance with the 
invention. To perform the loaning/sharing of the content 14, the devices 10, 12 may 
exchange their public keys 26 with each other. In the example shown in Figure 2, 
Device #N has communicated its public key to Device #1. In accordance with the 
invention, a devices 10 may also determine the public key for the another device or 
devices by logging into a well-known public key repository. Once the public key for 
the device to which the content is being transferred/loaned is received, the 
microprocessor 20 of Device #1 may execute the encryption software in the memory 
using the public key of Device #N so that only Device #N can open the communicated 
content. In addition to the actual content, the encrypted content may also include the 
usage rules associated with that piece of content, such as play once, play many times 
and the like. The encryption ensures that the usage rules of the content are not violated 
by multiple devices receiving the copy and playing it when only one device is 
authorized to receive the content. 

Next, the usage rights 16 of Device #1 may be modified to generate new usage 
rights 32 that reflect that Device #1 has made a copy of the content for Device #N. For 
example, Device #1 may have purchased a song with unlimited playing, but a limited 
predetermined number (e.g., 4) of copies may be made of the song. Thus, when 
25 Device #1 transfers the content to Device #N, the number of copies remaining for the 
content is reduced by one. As another example, if the user of Device #1 elects to 
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transfer the music to three other people with devices, then the user's usage rights for 
that music is reduced by three reflecting the three copies that are made of the song. In 
accordance with the invention, the user of Device #N, as described below, may return 
the music to the user of Device #1 and the usage rights for the music may be credited. 
5 The modification of the usage rights for the music ensures that the usage rules that 
apply to the particular music are honored. 

Once the usage rights are reduced, the content encrypted with the public key of 
Device #N is communicated to Device #N using the communications mechanism. 
Device #N may then decrypt the encrypted content and usage rules using its private 
10 key 28 (See Figure 1). The decrypted content and the usage rules associated with the 
content may then be stored in the memory 22 of Device #N so that the content may be 
used, as defined by the usage rules, by the user of Device #N. 

Figure 3 is a block diagram illustrating the two devices 10, 12 playing the 
shared piece of content in accordance with the invention. In the preferred embodiment 
shown, each device may include a speaker 40 so that the shared content 14 may be 
decompressed by each microprocessor 20 and played to the user of each device. In 
accordance with the invention, the content may be shared between the users, as one 
would expect to be able to do with a typical media, such as a CD or a record, while not 
violating the usage rules associated with the digital content. Advantageously, the 
system permits the music to be shared as a user would expect while ensuring that the 
users do not evade the usage rules associated with that music. Thus, the system 
permits the users to share the music while permitting the people who sold the music to 
maintain their control of the music using the usage rules. Thus, the user has the 
advantages of digital music (no media, a small portable player), but may use the digital 
music similar to typical media. Now, the process for a user to return the content to the 
original owner will be described. 
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Figure 4 is a diagram illustrating the second device 12 returning the piece of 
content 14 to the original user of the first device 10. In particular, the user of the 
second device 12 has decided to return the loaned music to the original user. In 
accordance with the invention, upon completion of this transaction, the user of Device 
5 #N will no longer be able to play the content at all and the user of Device #1 will have 
the same usage rights as she/he had before the user loaned/shared the content with the 
other user as one would expect if a user loaned a CD to another user and then the CD 
was returned. In more detail, Device #N may receive the public key for Device #1 by 
some method as described above. The microprocessor of Device #N may then encrypt 
1 0 the content along with the usage rules for that content to generate re-encrypted content 
30. 

Next, the usage rights in Device #N are modified to generate new usage rights 
32. In the example shown in Figure 4, the content is deleted from the memory 22 of 
Device #N and the usage rules are removed. However, in accordance with the 

15 invention, the content may still reside in the memory and the usage rights may be 
modified. For example, Device #N may retain some rights to play the song while 
returning other rights to the original user. Now, the encrypted content may be 
communicated to Device #1 using the communications mechanisms 18. Device #1, 
using the microprocessor, may then decrypt the content using the private key 28. In 

20 this example where the content is being returned to the user of Device #1, the 

microprocessor may scan the decrypted content to determine that it is the same content 
as is already stored in the memory. Therefore, the microprocessor may erase the 
decrypted content since it is a duplicate and then modify the usage rights to generate 
new usage rights 32. In this example, the new usage rights 32 are identical to the 

25 initial usage rights 16 for the content before the content sharing since the user of 
Device #N has returned the content that was loaned to him. Now, a flowchart 
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illustrating a method for sharing usage rule limited content in accordance with the 
invention will be described. 

Figure 5 is a flowchart illustrating a method 100 for sharing usage rule limited 
content in accordance with the invention. In step 102, the device (Device #1 or the 
5 originating device) may receive a public key of another device (Device #N or receiving 
device). In step 104, Device #1 may re-encrypt a piece of content and its associated 
usage rights using the received public key. In step 106, Device #1 may communicate 
the re-encrypted content to another device and modify its usage rights to reflect the 
loaning/sharing of the content with the other device. In step 108, the other device 
10 (Device #N) may receive the encrypted data, decrypt the data with its private key and 
play the content based on the usage rights associated with the piece of content. 

In summary, the system and method in accordance with the invention permits 
content, such as digital music content, to be shared/loaned like typical media, such as a 
CD or record, while maintaining the usage restrictions imposed on the content by the 
15 usage rules associated with the content. The system permits the user to use the content 
as he/she would expect to use content stored on typical media and permits the entity 
that sold the content to the user to enforce the user restrictions imposed on the content. 



While the foregoing has been with reference to a particular embodiment of the 
20 invention, it will be appreciated by those skilled in the art that changes in this 

embodiment may be made without departing from the principles and spirit of the 
invention, the scope of which is defined by the appended claims. 
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Claims : 

1 LA system for communicating content with associated usage rules 

2 between a content originating device and a content receiving device, comprising: 

3 the content originating device comprising means for determining encryption 

4 data for the receiving device, means for storing one or more pieces of content and its 

5 associated usage rights, the usage rights limiting the use of the content, means for 

6 encrypting a stored piece of content and its associated usage rights destined for the 

7 receiving device using the encryption data of the receiving device to generate 

8 encrypted data, means for communicating the encrypted data to the receiving device 

9 and means for reducing the usage rights to reflect the usage of the content by the 

1 0 receiving device; and 

1 1 the content receiving device further comprising means for decrypting the 

12 received encrypted data to generate content data and usage rights data and means for 

13 storing the content and the usage rights so that the receiving device plays the content 

14 while conforming to the usage rights associated with the content. 

1 2. The system of Claim 1, wherein the communications means comprises a 

2 wireless communications means, 

1 3. The system of Claim 2, wherein the wireless communications means 

2 comprises a microwave communications means. 

4. The system of Claim 1, wherein the content comprises audio data. 

5. The system of Claim 4, wherein the audio data comprises music. 

6. The system of Claim 1, wherein the content comprises video data. 



10 



WO 01/63822 



PCT/US01/05759 



1 7. The system of Claim 1, wherein the encryption data comprises a public 

2 key and a private key wherein the public key for the receiving device is determined by 

3 the originating device. 

1 8. The system of Claim 7, wherein the encryption data determining means 

2 further comprises means for determining the public key from a public key repository. 

1 9. The system of Claim 7, wherein the encryption data determining means 

2 further comprises means for communicating the public key directly from the receiving 

3 device to the originating device. 

1 10. The system of Claim 1, wherein the usage rights comprise a set of one 

2 or more usage rules that govern the use of the associated piece of content, each usage 

3 rules permitting different uses of the content. 

1 11. The system of Claim 10, wherein the usage rules comprise a play once 

2 usage rule, a play many times, but never copy usage rule, a play many times and copy 

3 a predetermined number of times usage rule and a play, copy and modify usage rule. 

1 12. A device for communicating content with associated usage rules to a 

2 device that receives the content, comprising: 

3 means for determining encryption data for the receiving device; 

4 means for storing one or more pieces of content and its associated usage rights, 

5 the usage rights limiting the use of the content; 

6 means for encrypting a stored piece of content and its associated usage rights 

7 destined for the receiving device using the encryption data of the receiving device to 

8 generate encrypted data; 
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9 means for communicating the encrypted data to the receiving device so that the 

1 0 receiving device decrypts and plays the content without violating the usage rights 

1 1 associated with the content; and 

12 means for reducing the usage rights to reflect the usage of the content by the 

1 3 receiving device. 

1 13. The device of Claim 12, wherein the communications means comprises 

2 a wireless communications means. 

1 14. The device of Claim 13, wherein the wireless communications means 

2 comprises a microwave communications means. 



15. The device of Claim 12, wherein the content comprises audio data. 

16. The device of Claim 15, wherein the audio data comprises music. 

17. The device of Claim 12, wherein the content comprises video data. 



1 18. The device of Claim 12, wherein the encryption data comprises a public 

2 key and a private key wherein the public key for the receiving device is determined by 

3 the device. 

1 19. The device of Claim 18, wherein the encryption data determining means 

2 further comprises means for determining the public key from a public key repository. 

1 20. The device of Claim 18, wherein the encryption data determining means 

2 further comprises means for communicating the public key directly from the receiving 

3 device to the device. 

1 21. The device of Claim 12, wherein the usage rights comprise a set of one 

2 or more usage rules that govern the use of the associated piece of content, each usage 

3 rules permitting different uses of the content. 
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1 22. The device of Claim 2 1 , wherein the usage rules comprise a play once 

2 usage rule, a play many times, but never copy usage rule, a play many times and copy 

3 a predetermined number of times usage rule and a play, copy and modify usage rule. 

1 23. A method for sharing content with associated usage rules to a device 

2 that receives the content, comprising: 

3 determining encryption data for the receiving device; 

4 storing one or more pieces of content and its associated usage rights, the usage 

5 rights limiting the use of the content; 

6 encrypting a stored piece of content and its associated usage rights destined for 

7 the receiving device using the encryption data of the receiving device to generate 

8 encrypted data; 

9 communicating the encrypted data to the receiving device so that the receiving 

10 device decrypts and plays the content without violating the usage rights associated with 

1 1 the content; and 

12 reducing the usage rights to reflect the usage of the content by the receiving 

13 device. 

1 24. The method of Claim 23, wherein the encryption data determining 

2 further comprises determining a public key from a public key repository. 

1 25. The method of Claim 23, wherein the encryption data determining 

2 further comprises communicating a public key directly from the receiving device to the 

3 device. 

1 26. A device for communicating audio content with associated usage rules 

2 to a device that receives the audio content, comprising: 

3 means for determining encryption data for the receiving device; 
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4 means for storing one or more pieces of audio content and its associated usage 

5 rights, the usage rights limiting the use of the audio content; 

6 means for encrypting a stored piece of audio content and its associated usage 

7 rights destined for the receiving device using the encryption data of the receiving 

8 device to generate encrypted data; 

9 means for communicating the encrypted data to the receiving device so that the 

10 receiving device decrypts and plays the audio content without violating the usage 

1 1 rights associated with the audio content; and 

12 means for reducing the usage rights to reflect the usage of the audio content by 

1 3 the receiving device. 
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